[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.195' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.176712] audit: type=1800 audit(1669425447.088:2): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor163" name="file0" dev="loop0" ino=18 res=0 [ 33.177317] [ 33.197749] ============================================ [ 33.203212] WARNING: possible recursive locking detected [ 33.208657] 4.19.211-syzkaller #0 Not tainted [ 33.213307] -------------------------------------------- [ 33.219006] syz-executor163/8087 is trying to acquire lock: [ 33.224693] 000000005d5d898b (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_get_block+0x292/0x960 [ 33.234348] [ 33.234348] but task is already holding lock: [ 33.240401] 000000008443bda9 (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_extend+0x1bb/0xf40 [ 33.250098] [ 33.250098] other info that might help us debug this: [ 33.256776] Possible unsafe locking scenario: [ 33.256776] [ 33.262810] CPU0 [ 33.265365] ---- [ 33.267935] lock(&HFSPLUS_I(inode)->extents_lock); [ 33.273015] lock(&HFSPLUS_I(inode)->extents_lock); [ 33.278094] [ 33.278094] *** DEADLOCK *** [ 33.278094] [ 33.284229] May be due to missing lock nesting notation [ 33.284229] [ 33.291138] 4 locks held by syz-executor163/8087: [ 33.295961] #0: 00000000e4b6024c (sb_writers#11){.+.+}, at: do_sys_ftruncate+0x297/0x560 [ 33.304370] #1: 0000000027a80c31 (&sb->s_type->i_mutex_key#17){+.+.}, at: do_truncate+0x125/0x1f0 [ 33.313453] #2: 000000008443bda9 (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_extend+0x1bb/0xf40 [ 33.323579] #3: 00000000cfcba439 (&sbi->alloc_mutex){+.+.}, at: hfsplus_block_allocate+0xe0/0xa60 [ 33.332660] [ 33.332660] stack backtrace: [ 33.337137] CPU: 0 PID: 8087 Comm: syz-executor163 Not tainted 4.19.211-syzkaller #0 [ 33.344990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 33.354324] Call Trace: [ 33.356899] dump_stack+0x1fc/0x2ef [ 33.360510] __lock_acquire.cold+0x121/0x57e [ 33.364900] ? mark_held_locks+0xf0/0xf0 [ 33.368940] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 33.374281] ? save_trace+0xd6/0x290 [ 33.377977] ? __lock_acquire+0x22f9/0x3ff0 [ 33.382454] lock_acquire+0x170/0x3c0 [ 33.386242] ? hfsplus_get_block+0x292/0x960 [ 33.390633] ? hfsplus_get_block+0x292/0x960 [ 33.395022] __mutex_lock+0xd7/0x1190 [ 33.398804] ? hfsplus_get_block+0x292/0x960 [ 33.403192] ? check_preemption_disabled+0x41/0x280 [ 33.408218] ? hfsplus_get_block+0x292/0x960 [ 33.412604] ? mutex_trylock+0x1a0/0x1a0 [ 33.416643] ? create_page_buffers+0x212/0x350 [ 33.421204] ? alloc_page_buffers+0x2da/0x5c0 [ 33.425681] ? lock_downgrade+0x720/0x720 [ 33.429892] ? do_raw_spin_lock+0xcb/0x220 [ 33.434109] hfsplus_get_block+0x292/0x960 [ 33.438326] block_read_full_page+0x288/0xd10 [ 33.442816] ? hfsplus_file_extend+0xf40/0xf40 [ 33.447462] ? __bread_gfp+0x300/0x300 [ 33.451340] ? add_to_page_cache_locked+0x40/0x40 [ 33.456601] do_read_cache_page+0x533/0x1170 [ 33.461010] ? hfsplus_bmap+0x30/0x30 [ 33.464837] hfsplus_block_allocate+0x197/0xa60 [ 33.469489] ? generic_make_request+0x369/0xdf0 [ 33.474140] hfsplus_file_extend+0x436/0xf40 [ 33.478528] ? hfsplus_free_fork+0x7e0/0x7e0 [ 33.482918] ? generic_make_request+0xdf0/0xdf0 [ 33.487652] ? check_preemption_disabled+0x41/0x280 [ 33.492657] ? guard_bio_eod+0x2a0/0x650 [ 33.496700] hfsplus_get_block+0x196/0x960 [ 33.500939] __block_write_begin_int+0x46c/0x17b0 [ 33.505849] ? hfsplus_file_extend+0xf40/0xf40 [ 33.510498] ? __breadahead_gfp+0x130/0x130 [ 33.514976] ? wait_for_stable_page+0x122/0x360 [ 33.519624] ? hfsplus_file_extend+0xf40/0xf40 [ 33.524182] block_write_begin+0x58/0x2e0 [ 33.528308] cont_write_begin+0x55a/0x820 [ 33.532441] ? lock_downgrade+0x720/0x720 [ 33.536572] ? hfsplus_file_extend+0xf40/0xf40 [ 33.541223] ? block_write_begin+0x2e0/0x2e0 [ 33.545631] ? __lock_acquire+0x22f9/0x3ff0 [ 33.550020] hfsplus_write_begin+0x87/0x150 [ 33.554320] ? hfsplus_file_extend+0xf40/0xf40 [ 33.558893] cont_write_begin+0x2ee/0x820 [ 33.563022] ? hfsplus_file_extend+0xf40/0xf40 [ 33.567582] ? __lock_acquire+0x22f9/0x3ff0 [ 33.572572] ? block_write_begin+0x2e0/0x2e0 [ 33.577094] ? current_time+0x6f/0x1c0 [ 33.580961] hfsplus_write_begin+0x87/0x150 [ 33.585262] ? hfsplus_file_extend+0xf40/0xf40 [ 33.589910] generic_cont_expand_simple+0x106/0x170 [ 33.594908] ? page_zero_new_buffers+0x600/0x600 [ 33.599642] ? inode_newsize_ok+0x121/0x1e0 [ 33.603973] ? setattr_prepare+0x135/0x7e0 [ 33.608187] hfsplus_setattr+0x18b/0x310 [ 33.612227] ? hfsplus_file_open+0x140/0x140 [ 33.616620] notify_change+0x70b/0xfc0 [ 33.620488] do_truncate+0x134/0x1f0 [ 33.624179] ? dentry_open+0x1d0/0x1d0 [ 33.628048] ? apparmor_path_truncate+0x183/0x200 [ 33.632869] do_sys_ftruncate+0x492/0x560 [ 33.637004] do_syscall_64+0xf9/0x620 [ 33.640807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 33.645980] RIP: 0033:0x7fb1389a27e9 [ 33.649673] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 33.668553] RSP: 002b:00007ffecc40d818 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 33.676242] RAX: fffffffffff